[lkml]   [2011]   [Oct]   [31]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [git patches] libata updates, GPG signed (but see admin notes)
    "H. Peter Anvin" <> writes:

    > On 10/31/2011 03:30 PM, Linus Torvalds wrote:
    >> But if you do the normal "git pull git://"
    >> - which is how things happen as a result of a pull request - you won't
    >> get tags at all - you have to ask for them by name or use "--tags" to
    >> get them all.
    > Didn't realize that... I guess I'm too used to named remotes.
    > If so, just using a tag should be fine, no?

    So nobody is worried about this (quoting from my earlier message)?

    On the other hand, the consumers of "Linus kernel" may want to say that
    they trust your tree and your tags because they can verify them with your
    GPG signature, but also they can independently verify the lieutenants'
    trees you pulled from are genuine.

    A signed emphemeral tag is usable as means to verify authenticity in a
    hop-by-hop fashion, but that does not leave a permanent trail that can be
    used for auditing.

     \ /
      Last update: 2011-10-31 23:47    [W:0.021 / U:65.288 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site